CVE-2024-52331 — ECOVACS lawnmowers and vacuums deterministic firmware encryption key
ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successful…
Published: 2025-01-23 · CVSS: 7.7 · CVSS 4.0
ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7